It is one of the safest wallets in existence, many famous wallets such as blockchain.info based their code on the bitcoin wallet. but it does not do the wallet to be safe and the user to be careless forgetting to make backups and put a bad PIN password so if that is the case, then the user who is not secure.
I do not know why you are blabbering in the answer mate. PIN and password is not a security feature to avoid the scam and hacking mate. If you have the 2FA, private key and security phrase secured you will be able to keep your wallet safe mate.
In android wallet you can see blockchain wallet and mycellium seems much secured than other wallets mate.